Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136372e302f32342d3234203d3e203631393138.roa
File:                     3137372e39322e3136372e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          tCZGUoD6aFdNAfxlkQMTc3bv99CJ8OXqnJMAX14xLdU=
Subject key identifier:   EA:83:38:DF:50:D7:2D:70:AD:AB:95:BB:E8:B0:1D:5E:03:76:44:D1
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       4DE0A9F4909A2FACA870E4F4F90665254656AECB
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136372e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     61918
IP address blocks:        177.92.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e0:a9:f4:90:9a:2f:ac:a8:70:e4:f4:f9:06:65:25:46:56:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=EA8338DF50D72D70ADAB95BBE8B01D5E037644D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:f2:9e:2b:0e:43:99:57:b6:89:f5:9a:30:
                    78:fc:d8:79:2f:49:b3:2d:1e:2c:79:55:b9:0b:79:
                    dd:1c:97:bc:5e:e1:e5:62:b0:5f:73:f7:46:ee:12:
                    80:c8:ad:e7:a9:81:dc:e4:f9:ac:b7:1f:5d:c1:c2:
                    26:08:5a:89:85:7e:db:e3:a5:56:5f:d6:51:b5:9c:
                    88:03:d7:30:4e:cc:f5:8e:44:f7:1d:dd:f9:6d:59:
                    58:59:ee:36:87:43:e4:fc:d6:87:64:75:65:a6:47:
                    36:29:0b:79:08:6a:67:aa:76:bf:b4:ea:22:82:fc:
                    bc:3b:24:98:1e:84:1c:7e:1b:95:65:b2:1a:b6:eb:
                    01:01:8d:bc:84:f6:26:49:32:67:57:39:27:3a:a3:
                    ec:0b:db:ee:39:b8:f2:ac:33:85:33:d9:a8:51:e8:
                    fd:e3:a8:e2:3d:79:df:2d:9d:39:53:59:56:33:58:
                    b8:fe:bb:f1:12:26:01:7b:60:4e:e4:12:a2:c9:c9:
                    b4:e4:53:82:20:2e:ad:73:76:74:65:d5:6a:18:32:
                    39:e2:a6:ca:2d:10:c1:22:01:06:66:ff:da:23:db:
                    46:22:32:fd:30:5f:cc:0a:02:a5:c7:02:ab:77:4b:
                    5d:60:2c:82:8c:95:80:a7:5b:91:46:71:fd:fd:3d:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:83:38:DF:50:D7:2D:70:AD:AB:95:BB:E8:B0:1D:5E:03:76:44:D1
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136372e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:89:e5:05:53:e9:b1:ba:35:f4:51:d8:63:7b:73:f7:f4:be:
         77:aa:b3:07:64:44:5a:18:2c:0a:4c:45:7c:d9:4d:1e:3a:31:
         ee:c8:b9:24:d6:f1:bd:72:a4:a5:60:b3:4f:c8:29:fd:05:6b:
         dd:16:5c:ac:46:f5:f3:b1:4f:da:ad:11:44:7c:f4:6c:1b:e0:
         fd:fb:1c:5a:25:c2:55:49:15:41:4f:aa:bb:67:22:9e:7f:49:
         d1:c6:28:8e:16:f2:75:cf:a3:0c:6b:9f:1b:01:89:12:66:96:
         db:e6:65:8b:d5:70:e0:64:e3:c3:ce:b2:29:83:a9:36:61:75:
         4b:ee:e8:02:2f:d5:69:5f:0d:f5:83:52:c7:f5:bc:c1:b4:03:
         c2:ef:c4:da:83:01:a2:11:c1:c3:5c:ed:6d:ff:7f:64:a2:39:
         8b:ab:3e:da:67:f2:b6:ee:d7:00:de:62:ea:ab:13:bc:b6:e3:
         26:76:44:d3:d5:e8:81:ca:ba:c9:c1:19:e4:89:8b:32:1a:a8:
         da:d2:0d:82:1d:d7:24:37:b1:0b:bf:19:74:af:df:20:c6:54:
         24:21:35:bc:cb:85:fc:36:4d:7c:53:48:d1:19:3f:63:c1:12:
         34:b9:8e:1f:f3:41:24:3f:ea:e5:7c:a9:86:22:7f:b7:0b:f0:
         d8:5b:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:29:02 2025 by rpki-client